News for hackers. Stuff that matters.

A comment on Make Ubuntu packages 90% faster by rebuilding them. Parent comment

Re:Make Ubuntu packages 90% faster by rebuilding them by bigstrat2003 on Tuesday March 18, 2025 @11:38PM (#43408076)
ASLR is by definition security through obscurity. That doesn't make it useless, as there's nothing wrong with using obscurity as one layer of defenses. But that doesn't change what it fundamentally is: obscuring information so that an attacker has to work harder.
[ Parent | on HN ]
Re:Make Ubuntu packages 90% faster by rebuilding them by greiskul on Wednesday March 19, 2025 @12:25AM (#43408255)
Is having a secret password security by obscurity? What about a private key?

Security by obscurity is about the bad practice of thinking that obscuring your mechanisms and implementations of security increases your security. It's about people that think that by using their nephew's own super secret unpublished encryption they will be more secure than by using hardened standard encryption libraries.

[ Parent | on HN ]
Re:Make Ubuntu packages 90% faster by rebuilding them by robertlagrant on Wednesday March 19, 2025 @01:26AM (#43408512)
Security by obscurity is keeping your security algorithms and design secret, not your data at runtime secret.
[ Parent | on HN ]